Embedded Reports w/ RLS

[sjungels]

Hi, 

I am implementing a multi-tenant web app and want to use Power BI Embedded for the reporting frontend. The idea is to the use 'app owns data' scenario. Based on this, I understand that RLS can do the trick and restrict data based on the user logging into my application.

The question I have is related EffectiveIdentity: my understanding is that my application authenticates against AAD and PowerBI using an admin user with a Power BI Pro license. I then need to obtain embed tokens for each individual end user to ensure proper security. How does Power BI know that user 'John Doe' who doesn't have any Power BI or Microsoft user can only see certain data sets? This is not clear to me.

Thanks,
Sebastian

[zoloturu]

Hi @sjungels,

I think it is described here properly - https://docs.microsoft.com/en-us/power-bi/developer/embedded-row-level-security

Regards,
Ruslan
-------------------------------------------------------------------
Did I answer your question? Mark my post as a solution!

[sjungels]

Hi @zoloturu

thanks for your answer / feedback. 

I have read (and referenced) this article in my post. It does talk about restricting access within a table / database. The question further expands: after additional investigation I understand that we can use RLS to restrict data within a table / DB... how can this be used in a multi-tenant environment using a single DB but different schemas within that DB?

Thanks,
Sebastian